Location
London

Hours
Full Time

Salary
Negotiable

About the Role
The London Stock Exchange Group (LSEG) is seeking an experienced, dedicated, and driven Senior Attack Monitoring Analyst to join the Global Security Operations Centre (GSOC) team. As part of LSEG Security Operations, you will be involved in continuously monitoring and responding to cyber security incidents using people, process, and technology. This senior role focuses on identifying and responding to cyber security incidents while enhancing the defensive capabilities of the GSOC. The ideal candidate will have a strong technical background, a firm understanding of modern attack techniques, and knowledge of the typical lifecycle of cyber attacks. You will triage security events, respond methodically to incidents using established playbooks, operate SIEM platforms such as Splunk, QRadar, or LogRhythm for investigations and dashboard development, and research threat intelligence to improve detection capabilities. Staying current with vulnerabilities, attacks, and countermeasures is essential, as is developing and improving run books and use cases based on investigations and evolving attack techniques. You will play a key role in identifying, responding to, and remediating cyber events generated through monitoring technologies.

Experience
- Preferred experience operating or administering SIEM platforms (e.g., Splunk, QRadar, LogRhythm)
- Solid understanding of networks including TCP/IP stack, typical organizational architectures, and common protocols exploited by malware
- Proven experience in security event analysis and triage, incident handling, and root-cause identification
- Knowledge of attacker tools, techniques, and procedures, ideally from direct experience
- Cyber security knowledge gained academically or within corporate environments
- Ability to work calmly and effectively in a fast-paced, demanding environment
- Strong verbal and written communication and collaboration skills

About you
You are a technically proficient and analytical professional with a passion for cyber security. You thrive in dynamic environments and are committed to continuous learning and improvement. You bring a collaborative mindset and are eager to contribute to a creative and innovative team culture.

Qualifications
- Security industry certifications such as OSCP, GIAC, CCNA are highly desirable
- Certification demonstrating SIEM operational competence
- Proficiency in one or more programming languages (e.g., Python, PowerShell, Java, C#)